VMware vSphere 7.0/8.0 – ransomware operators exploit vulnerability for mass encryption

A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group (‚ESX Admins‘ by default) after it was deleted from AD VMware ESXi 7.0/8.0 – updates address multiple security vulnerabilities CVE-2024-37085 CVE-2024-37086 CVE-2024-37087

This entry was posted on Mittwoch, September 4th, 2024 at 17:48 and is filed under Administration, VMware vSphere 7, VMware vSphere 8. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Reply

You must be logged in to post a comment.